Changing passwords in XL Deploy

Change the encryption key password

Passwords that are stored in the repository are encrypted with a secret key. This password encryption key is stored in a keystore file called XL_DEPLOY_SERVER_HOME/conf/repository-keystore.jceks. This keystore file is optionally protected with a password. If a password is set, you need to enter the password when the XL Deploy server starts.

Note:repository-keystore.jceks is one of two keystore concepts in XL Deploy. This keystore only contains the key used for encryption of passwords in the repository. If you use HTTPS, XL Deploy will use a second keystore file to store the self-signed certificate.

To change the keystore password, you can use the keytool utility that is part of the Java JDK distribution:

Reset the admin user’s password

If you have forgotten the password for the built-in admin user and you do not have the password for another user with the admin global permission, then you cannot authenticate with the XL Deploy server to change the admin password. It is strongly recommended that you create at least one additional user with the admin permission to prevent this situation.

Prior to XL Deploy 5.1.0, you can install a hotfix to disable password checks and then use the user interface to set a new password for the admin user. Note that:

This procedure is not supported for XL Deploy 5.1.0 and later.

You must back up your XL Deploy instance before resetting the password.